TOP SECRET//COMINT//REL TO USA, FVEY 



VALIANTSURF (VS): 



VALIANTSURF 
Capability Level 


■ ■ ■ * m ■ m m 

Beneficiaries 


CES & 
LONGHAUL 


OTP & 
SSG 


TOPIs 


Link Access 


CES 


A 


Key Recovery, no on-site 
decryption 


X 










B 


Key Recovery, on-site SW 
Decryption , XKS 
SIGDEV 


X 


X 








C 


Key Recovery, on-site SW 
Decryption, XKS SIGDEV , 

offsite processing of 
full take decrypt 


X 


X 


X 






D 


Key Recovery, on-site SW 
Decryption, XKS SIGDEV , 

on-site packet and 
session selection and 
forwarding of decrypt 


X 


X 


X 


X 




E 

OTE: 


Key Recovery, on-site HW 
Decryption, XKS SIGDEV , 
.onsite packet and session , 

^MiS l 3Sd l TOa r r?fi l i5 s Sf lt 

decrypt 


addec^capab 


... x 

lity over pr 


or levef 


X 


X 



1 
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VALIANTSURF (VS): Success Criteria 

DNC (Data Network Cipher ) target development performed using metadata 

TURMOIL DNC targeting in place (via UTT & KEYCARD) and needed CASNs on cover 

ITx connectivity between CES backend and CA Servers at site 

CA Servers at site accessible, hardened, loaded and functioning 

Pairing exists for the targeted DNC IP addresses 

LONGHAUL is able to exploit the traffic 

VS-compatible TURMOIL software loaded 

XKS retrospective available for DNC plain text target development (i.e. determine selectors) 

Bandwidth available and policy approves 
Plain text selectors loaded in TURMOIL and XKS 
Needed mission applications available in TURMOIL stage 1 prime 
XKEYSCORE-Stage 2 functioning 

CA Server with hardware acceleration in place with sufficient TU network configuration 



VS Capability 
Level 


Success Criteria Required 


i 


2 


3 


4 


5 


6 


7 


8 


9 


10 


1 

1 


1 

2 


1 

3 


A 


X 


X 


X 


X 


X 


X 
















B 


X 


X 


X 


X 


X 


X 


X 


X 












c 


X 


X 


X 


X 


X 


X 


X 


X 


X 










D 


X 


X 


X 


X 


X 


X 


X 


X 


X 


X 


X 


X 




E 


TO# S 


CI*ET 


/C$M 


n¥//f 


X 


X 


X 


X 


X 


X 


X 


X 


X 
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VALIANTSURF (VS): Current Capability 

Status 



Site 



MUSC 
XCUT 
TEC 
MHS 
G1 
G3 
S 5G 
S BCH 

GH 

ICE 
20G** 
240G 
( 6 / 11 ) 
PSK 
Defensi 
ve 

( 1 / 11 ) 

Remain 

ng 

Defensi 
ve (9 
sites) 



VS 
Capabilit 

y 



VS Dependencies 



13. CA HW 



C D E 



1. IP 
SIGDEV 


2. 

TARGETTIN 

G 


3. ITx 


4. CA 
Server 


5. 

Pairing 


6. 

Exploitabl 

e 


7. TML/VS 


8. XKS 
Retro- 
spective 


9. BW& 
Policy 














18.1.7 


















15.6.1 


















15.6.1 


















13.1.6 









11. XKS 
Stage2 



■IBM 

13650 



18.1.6 



-TQP- 



* Caviijj 
** JCE 

SECRET//COM 



m cards 

20G is a 

NT//REL 



still to 

dev sy 

T0- 



be ordered fo 
stem 



r these s 



tes 



iDell 

12950 

■ Del I 

(2950 

IDell 

12950 

IDell 

12950 

IDell 

1 2950 

IDell 

2950 

llBM 

13650 

IBM 

3650 

IBM 

3650 

IBM 

3650 



IBM 

3650 



Cavium 
Included 
? 

yes 



no 



no 



no 



no 



no 



no 



no 



Eventua 
lly* 

yes 
yes 

Eventua 
lly* 



Eventua 
lly* 
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